On Wed, Jan 3, 2024 at 12:21 PM Finn Fysj via FreeIPA-users <freeipa-users@lists.fedorahosted.org> wrote:
>
> > Finn Fysj via FreeIPA-users wrote:
> >
> > There is not currently.
> >
> > I guess I would suggest hardening after installing IPA. You're moving
> > into an untested/unsupported configuration so keep that in mind. There
> > be dragons.
> >
> > rob
> Thanks Rob.
>
> However, does that mean we can get surprises if we're so bold and configure e.g UMASK after IPA installation etc.?

Yes, there could be some surprises, but there have been reports of people
using more strict UMASK. Still, it is untested/unsupported.

Rafael

> --
> _______________________________________________
> FreeIPA-users mailing list -- freeipa-users@lists.fedorahosted.org
> To unsubscribe send an email to freeipa-users-leave@lists.fedorahosted.org
> Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
> List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
> List Archives: https://lists.fedorahosted.org/archives/list/freeipa-users@lists.fedorahosted.org
> Do not reply to spam, report it: https://pagure.io/fedora-infrastructure/new_issue



--
Rafael Guterres Jeffman
Senior Software Engineer
FreeIPA - Red Hat